Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Snyk vulnerability by adding license name to package.json #49

Open
zmagauina-fn opened this issue Sep 8, 2022 · 0 comments
Open

Comments

@zmagauina-fn
Copy link

zmagauina-fn commented Sep 8, 2022

Hi! My team is using this package and have certain security requirements, we're getting a Snyk vulnerability on this package because Snyk can't detect the license:

Unknown license: Snyk was not able to detect a license for this package. This is either because the license wasn't defined in the package file (i.e. package.json, pom.xml, etc.) or the license name found doesn't match anything in SPDX's License List.

This is a really simple fix, just adding "license": "MIT" to package.json.
@florrain can I make this change? I know there hasn't been a new version in years but this is a perfectly good package we'll have to replace otherwise.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant